External Secrets Operator

The External Secrets Operator provides an easy synchronization of external secrets providers to native Kubernetes Secret resources.

It supports an extensive list of secrets providers like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager and Azure Key Vault.

We recommend to avoid tight coupling with cloud-specific secret managers and use open-source tools like OpenBao instead or use Sealed Secrets.

The External Secrets Operator's provider documentation explains in detail how to configure synchronization with all supported secret providers including all the provider-specific details.